$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: nnkqd3pvntg4evQsl3fvpPKLVC/oBoY9cvljihviQ/g= Subject key identifier: BB:0D:C0:14:40:60:68:28:2B:02:D7:55:AA:57:D2:4F:C6:51:CC:4A Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 01B5 Signing time: Thu 24 Apr 2025 16:56:00 +0000 Manifest this update: Thu 24 Apr 2025 16:56:00 +0000 Manifest next update: Thu 01 May 2025 16:56:00 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: iGVrPhxhcK3MaGxrOkKV0sA5BmSmDxfAS7tTS8o5Hpw=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: ux/yn18OibC6Db2VOykrM0n0NcvF/7PYrwCoPjjFpC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Apr 24 16:56:00 2025 GMT Not After : May 1 16:56:00 2025 GMT Subject: CN=680a6d20-bbf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:f8:5f:5d:4c:62:a9:9f:b4:4c:b1:f3:74: 06:3b:4b:6c:a2:1d:82:cb:9f:d1:83:00:86:62:bd: 9a:46:ff:0a:25:5d:6e:90:04:d2:56:0b:8e:6b:44: ed:02:26:d3:33:43:f2:73:1e:91:26:9e:82:c6:50: cd:1f:74:d3:1f:be:17:1f:2f:fd:5b:37:64:fe:4b: c1:1e:6a:15:78:29:cc:f6:6e:ba:56:d7:18:71:e7: 4d:ac:ba:3b:c3:c3:24:d2:e7:da:ec:32:48:82:35: c2:b5:09:63:37:ef:ca:24:f9:35:32:e8:ad:7e:3e: e3:97:b0:21:1a:9d:fd:e2:4b:32:96:12:ef:84:cf: 16:34:3f:d9:ce:e5:cd:5a:0f:4a:4b:f5:10:27:90: d8:5e:0e:09:bc:fd:59:76:e0:28:79:a8:1c:a6:43: 1d:97:23:f2:8f:24:bc:fb:be:1a:7d:e6:19:90:b1: 0e:3c:60:01:c5:e5:c9:7c:54:71:78:b8:ac:2d:61: 52:ed:35:9e:b9:36:7e:77:3f:3f:f9:91:20:4d:56: d0:8b:e1:19:fd:68:10:1a:f9:e5:2e:ef:ea:86:01: e6:ed:d8:28:6d:76:ca:0c:41:2d:48:c7:5d:4d:3f: 6f:d6:1b:1c:f4:8d:14:3e:6e:c4:f8:ab:f7:40:7b: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:0D:C0:14:40:60:68:28:2B:02:D7:55:AA:57:D2:4F:C6:51:CC:4A X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:78:be:53:73:81:b4:60:43:a5:67:8b:40:60:93:42:2c:d7: bb:60:aa:93:f1:a5:50:86:eb:d7:65:0c:c8:86:ea:65:c8:2e: 51:a4:e4:9c:9b:62:cc:30:85:00:b7:a4:3d:65:25:b9:dd:a2: c6:db:60:ee:3a:a0:ef:1f:21:60:34:a0:38:97:8f:4e:89:b9: 7c:68:e2:11:f2:36:f2:b9:be:5a:9e:ce:a0:e6:35:90:07:11: b5:19:b0:bb:bc:8f:b1:29:39:da:f1:71:ed:3d:b6:54:5e:80: f4:35:b8:af:14:47:1e:cc:c9:87:e0:ca:51:5a:d3:e2:ff:95: 7f:a2:41:95:ab:f9:eb:f8:27:ea:0d:97:13:8c:21:22:e0:64: 3a:06:d8:19:f7:a9:4c:04:25:d7:de:d6:4d:13:98:17:54:26: f2:a8:5b:35:b0:d1:06:ed:29:8c:82:64:8e:a4:ba:f2:cf:d2: ed:bf:c5:03:5d:3b:a0:8a:e9:26:1f:a5:27:a2:de:0d:c6:e1: 99:e7:da:37:12:1f:8b:cb:09:3a:1c:87:c4:08:51:58:be:58: dc:d5:f2:67:d0:22:2e:d1:e3:1f:4d:3e:70:1c:d0:c0:d9:fe: 69:9f:9c:ef:8b:f1:21:00:13:d8:1d:d5:b4:7e:3d:4a:5d:c3: c4:e5:6e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjUwNDI0MTY1NjAwWhcNMjUwNTAxMTY1NjAwWjAYMRYwFAYD VQQDEw02ODBhNmQyMC1iYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QT4X11MYqmftEyx83QGO0tsoh2Cy5/RgwCGYr2aRv8KJV1ukATSVguOa0Tt AibTM0Pycx6RJp6CxlDNH3TTH74XHy/9Wzdk/kvBHmoVeCnM9m66VtcYcedNrLo7 w8Mk0ufa7DJIgjXCtQljN+/KJPk1Muitfj7jl7AhGp394ksylhLvhM8WND/ZzuXN Wg9KS/UQJ5DYXg4JvP1ZduAoeagcpkMdlyPyjyS8+74afeYZkLEOPGABxeXJfFRx eLisLWFS7TWeuTZ+dz8/+ZEgTVbQi+EZ/WgQGvnlLu/qhgHm7dgobXbKDEEtSMdd TT9v1hsc9I0UPm7E+Kv3QHsqKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsNwBRA YGgoKwLXVapX0k/GUcxKMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBveL5Tc4G0YEOlZ4tAYJNCLNe7YKqT8aVQhuvXZQzIhuplyC5RpOSc m2LMMIUAt6Q9ZSW53aLG22DuOqDvHyFgNKA4l49Oibl8aOIR8jbyub5ans6g5jWQ BxG1GbC7vI+xKTna8XHtPbZUXoD0NbivFEcezMmH4MpRWtPi/5V/okGVq/nr+Cfq DZcTjCEi4GQ6BtgZ96lMBCXX3tZNE5gXVCbyqFs1sNEG7SmMgmSOpLryz9Ltv8UD XTugiukmH6Unot4NxuGZ59o3Eh+Lywk6HIfECFFYvljc1fJn0CIu0eMfTT5wHNDA 2f5pn5zvi/EhABPYHdW0fj1KXcPE5W7F -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:36 2025 by rpki-client